Inicio Explorar Ayuda
Registro Iniciar sesión
AFS
/
xdr-terraform-modules
2
0
Fork 0
Archivos Incidencias 0 Pull Requests 0 Wiki
Árbol: e40246b7e7
Ramas Etiquetas
xdr-terraform-m...
/
base
/
splunk_servers
/
legacy_hec
Fred Damstra [afs macbook] 4503f2272a Updates and Cleanup for tf update hace 3 años
..
README.md 7eec713943 Updates legacy_hec module to better handle iratemoses aliases hace 4 años
elb-with-acks.tf fb25b7c56a Adds lifecycle policy to aws_acm_certificates hace 3 años
elb-without-ack-internal.tf 9318d3d544 Updates and Fixes Found During apply_all_everywhere hace 4 años
elb-without-ack.tf fb25b7c56a Adds lifecycle policy to aws_acm_certificates hace 3 años
main.tf e40079b5d5 Creates elbs with legacy DNS names and certificates for use during migration hace 4 años
security-group-elbs.tf 5955b1762b The internal hec SG needs to only be created for moose hace 4 años
vars.tf b14df4c864 Adds iratemoses as a DNS alias for the legacy load balancers hace 4 años

README.md

Summary

This module creates HEC load balancers using the previous domain name for for legacy compatibility. It should not be added to new accounts.

Without this, the existing customer AWS data and other things submitting to the HEC could get lost during the migration.

But if activity is low/zero, destroy it!

iratemoses Aliases

Additionally, for MOOSE only, it creates 'iratemoses' aliases.

List of HECs

Permanent:

These are the HECs created by the indexer cluster module, which will stick around:

moose-hec.xdrtest.accenturefederalcyber.com - Non-ack external HEC moose-hec-ack.xdrtest.accenturefederalcyber.com - ACK external HEC moose-hec.pvt.xdrtest.accenturefederalcyber.com - non-ack internal HEC moose-hec-ack.pvt.xdrtest.accenturefederalcyber.com - ACK internal HEC

These are the HECs that are created by the legacy_hec module, which should not be used for any new purposes:

moose-hec.mdr-test.defpoint.com moose-hec-ack.mdr-test.defpoint.com iratemoses.msoc.defpoint.local (moose only) iratemoses.mdr-test.defpoint.com (moose only)

Notably, the following intentionally do not exist:

moose-hec.msoc.defpoint.local moose-hec-ack.msoc.defpoint.local